News for hackers. Stuff that matters.

A comment on Allegations of FBI crypto backdoors in OpenBSD IPSEC. Parent comment

Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by dfranke on Tuesday December 14, 2010 @06:19PM (#2006173)
That depends. Do we just have to find a vuln somewhere in one of NETSEC's check-ins, or do we have to prove it was put there deliberately?
[ Parent | on HN ]
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by tptacek on Tuesday December 14, 2010 @06:26PM (#2006193)
Vulns are disqualified if a similar vuln was check in to an analogous crypto product within a 5 year window.
[ Parent | on HN ]
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by pbhjpbhj on Tuesday December 14, 2010 @09:53PM (#2006840)
Wouldn't that be a great way to hide it though, insert a vulnerability that you've seen elsewhere and know how to exploit rather than inserting something completely unfamiliar. Indeed if it's been in some other app and not discovered then it's unlikely to get noticed quickly.
[ Parent | on HN ]